On Fri, Jun 22, 2018 at 11:01:53PM -0400, Bruce Momjian wrote: > Uh, as I am understanding it, if we don't allow clients to force channel > binding, then channel binding is useless because it cannot prevent > man-in-the-middle attacks. I am sure some users will try to use it, and > not understand that it serves no purpose. If we then allow clients to > force channel binding in PG 12, they will then need to fix their > clients. > > I suggest that if we don't allow users to use channel binding > effectively that we should remove all documentation about this > feature.
Well, I don't agree with this position as the protocol put in place for SCRAM with or without channel binding perfectly allows a client to enforce the use channel binding. While that's missing for libpq, other clients like JDBC or npgsql could perfectly implement that before this gets in Postgres core in the shape they want. So I think that the docs should be kept. -- Michael
signature.asc
Description: PGP signature
